Patent claims 



A meihod for exchanging at least one secret initial value between a processing 
station Wid a chip card, in an initializing step for the chip card, wherein 

fir^values for determining the secret initial value are generated in the 

processing station, 

parts hf the first values are transmitted to the chip card, 

secondValues for determining the secret initial value are generated in the 
chip card, 

parts of tlie second values are transmitted to the processing station, 
the secret iWial value is determined in the processing station from at least 
parts of the first values and the transmitted parts of the second values, and 
the secret inikl value is determined in the chip card from at least parts of 
the second valiaes and the transmitted parts of the first values. 
A method according *o claim 1, characterized in that at least one part of the 
second values generated in the chip card is generated in accordance with an in- 
dividual identifier preseW in the chip card, in particular a serial number. 
A method according to ckim 1 -op^, characterized in that 

the first values geneJated in the processing station are subjected to a first 
fimction, \ 

the result of the first friction is transmitted to the chip card in addition to 
the part of the first values generated, 

at least one part of the sedond values generated in the chip card is sub- 
jected to a second fimctionWith the transmitted part of the first values, 
the result of the second fim(kon is transmitted to the processing station, 
the secret initial value is generated in the processing station by means of a 
third fimction from the transmitted result of the second fimction and a 
part of the first values, in particiiiar the first part of the values not trans- 
mitted to the chip card, and \ 

the secret initial value is generated k the chip card by means of a fourth 
fimction from the transmitted result \f the first fimction, the transmitted 



parAof the first values and at least one part of the second values, in par- 
ticul^ the part of the second values not transmitted to the processing sta- 
tion. 

A method according to claim 3, characterized in that the first, second, third and 
fourth functions are identical. 

A method according to claim 4, characterized in that the function involves ex- 
ponentiating a ferst variable with a second variable and fonning a modulo resi- 
due to a third vakable, the variables coixesponding to the first and second val- 
ues and the first dSnd second results. 

A method accordiik to- ony of cl.^'iS 1 lu 5, characterized in that the secret 
initial value is a sta^ value for generating random numbers 
A method accordmg to any of clai n i!T -44e^ characterized in that the secret 
initial value is a key fdr encrypting and decrypting data. 

A method according to Uaim 7, characterized in that the key generated in proc- 
essing station and chip cLd is used in a personalizing step for encrypting and 
decrypting personalizing data, in particular further secret keys, which are 
transmitted from the processing station to the chip card. 
A method according to clainA 8, characterized in that the key generated in the 
processing station and the chiA card is deleted in the processing station and the 
chip card after the personalizing step. 



